MCP_Pentesting/Dockerfile at main · anarcoiris/MCP_Pentesting · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
FROM kalilinux/kali-rolling

# Avoid interactive prompts during install
ENV DEBIAN_FRONTEND=noninteractive

RUN apt-get update && apt-get install -y --no-install-recommends \
    # === Reconocimiento y Enumeración ===
    nmap masscan zmap \
    amass sublist3r dnsrecon \
    gobuster dirb \
    eyewitness \
    recon-ng spiderfoot \
    # === Escaneo de Vulnerabilidades ===
    nikto wapiti skipfish \
    # === Explotación ===
    hydra medusa john \
    cewl crunch \
    # === Análisis de Red ===
    wireshark-common tshark tcpdump ngrep \
    bettercap mitmproxy \
    python3-scapy dsniff netcat-openbsd socat \
    argus-client \
    # === Criptografía ===
    hashcat hash-identifier \
    openssl gnupg ophcrack \
    # === Fuzzing ===
    afl++ zzuf \
    # === Firmware / IoT ===
    binwalk \
    # === Ingeniería Inversa ===
    radare2 \
    apktool \
    # === Análisis de Malware ===
    yara \
    # === Protocolos ===
    hping3 yersinia tcpreplay \
    # === Wireless ===
    aircrack-ng reaver bully \
    # === Evasión ===
    checksec \
    # === Bases de Datos ===
    sqlmap \
    # === General ===
    python3 python3-pip python3-venv \
    curl wget httpie jq git unzip \
    dnsutils whois iputils-ping net-tools \
    openjdk-17-jre-headless \
    && rm -rf /var/lib/apt/lists/*

# --- Python tools ---
RUN pip3 install --break-system-packages --quiet \
    shodan \
    censys \
    frida-tools \
    objection \
    impacket \
    pefile \
    volatility3 \
    || true

# --- Nuclei (binario) ---
RUN ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') && \
    curl -sSL "https://github.com/projectdiscovery/nuclei/releases/latest/download/nuclei_$(curl -s https://api.github.com/repos/projectdiscovery/nuclei/releases/latest | grep tag_name | cut -d '"' -f 4 | tr -d 'v')_linux_${ARCH}.zip" \
    -o /tmp/nuclei.zip && \
    unzip -q /tmp/nuclei.zip -d /usr/local/bin/ && \
    rm /tmp/nuclei.zip && \
    nuclei -ut -silent || true

# --- ffuf (binario) ---
RUN ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/') && \
    curl -sSL "https://github.com/ffuf/ffuf/releases/latest/download/ffuf_$(curl -s https://api.github.com/repos/ffuf/ffuf/releases/latest | grep tag_name | cut -d '"' -f 4 | tr -d 'v')_linux_${ARCH}.tar.gz" \
    -o /tmp/ffuf.tar.gz && \
    tar -xzf /tmp/ffuf.tar.gz -C /usr/local/bin/ ffuf && \
    rm /tmp/ffuf.tar.gz || true

# --- theHarvester ---
RUN git clone --depth 1 https://github.com/laramies/theHarvester.git /opt/theHarvester && \
    pip3 install --break-system-packages --quiet -r /opt/theHarvester/requirements/base.txt || true

# --- EMBA (Firmware analysis) ---
RUN git clone --depth 1 https://github.com/e-m-b-a/emba.git /opt/emba || true

# --- Ghidra (headless) ---
RUN curl -sSL "https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_11.0_build/ghidra_11.0_PUBLIC_20240115.zip" \
    -o /tmp/ghidra.zip && \
    unzip -q /tmp/ghidra.zip -d /opt/ && \
    mv /opt/ghidra_11.0_PUBLIC /opt/ghidra && \
    rm /tmp/ghidra.zip && \
    ln -s /opt/ghidra/support/analyzeHeadless /usr/local/bin/ghidra-headless || true

WORKDIR /workspace

CMD ["/bin/bash"]